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Abstract 

The diamond norm is a norm defined over the space of quantum transformations. This norm 
has a natural operational interpretation: it measures how well one can distinguish between two 
transformations by applying them to a state of arbitrarily large dimension. This interpretation 
makes this norm useful in the study of quantum interactive proof systems. 

In this note we exhibit an efficient algorithm for computing this norm using convex program- 
ming. Independently of us, Watrous I Wat09 1 recently showed a different algorithm to compute this 
norm. An immediate corollary of this algorithm is a slight simplification of the argument of Kitaev 
and Watrous OKWOOI that QIP C EXP. 

1 Introduction 

How well can one distinguish two quantum transformations? Imagine we have access to some unknown 
admissible super-operator T and we want to distinguish the case it is Ti from the case it is T2 (Ti and 
T2 are known). Suppose that Ti and T2 take as input a state from a Hilbert space V. One possible test 
to distinguish Ti from T2 is preparing an input state p G D(y) (where D{V) denotes the set of density 
matrices over V), applying T on p and measuring the result. This corresponds to: 

sup{||rip-r2p||,, : peD{v)]. 

However, somewhat surprisingly, it turns out that often one can distinguish Ti and T2 better, by 
taking an auxiliary Hilbert space A, preparing an entangled input state p G Diy^A), applying T on 
the V register of p and then measuring the global result. Therefore, we define: 

dist(pi,/)2) = sup|||(Ti0/i(^))p - (T2®/i(^))/)||^^ : dmi{ A) < 00, p ^ D{V®A)Y 

Kitaev l|Kit97ll proved that this phenomena is restricted by dimension and the maximum is attained 
already with an auxiliary Hilbert space A of dimension dim(^) < dim(V). Define the following 
functions on general (not necessarily admissible) super-operators T : Liy) L(yV): 

||T||,, = sup{||T(X)||,,:XGL(V),||X||,, = l},and, 
= \\T®lLiV)l,- 

Kitaev showed that both and ||-||^ are norms. Furthermore, Rosgen and Watrous IIRW051 Lemma 
2.4] showed dist(ri, r2) = ||ri - T2\\^ for Ti and T2 that are completely positive. 

The diamond norm naturally appears when studying the class QIP of languages having a single- 
prover, multi-round interactive proof protocol between an all-powerful prover and an efficient quantum 
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verifier. Kitaev and Watrous IIKWOOII sliowed tliat, witliout loss of generality, perfect completeness can 
be achieved and three rounds suffice (starting with the verifier). They also showed that the value of a 
three round quantum interactive protocol can be expressed as ||T||^, for some super-operator T that is 
naturally defined given the protocol of the verifier. They used this characterization, and the fact that 
||Ti(8)T2||^ = llTill^ • ||T2||^ to show perfect parallel amplification for QIP protocols. Finally, they 
showed that QIP C EXP by reducing the problem to an exponential size semi-definite programming 
problem. Thus QIP is somewhere between PSPACE and EXP (the containment PSPACE = IP C QIP 
is immediate). Very recently, Jain et. al. IIJJUW09 1 showed that QIP = PSPACE, by showing a space 
efficient solution to a semi-definite program that captures the complexity of the class QIP. 

Another connection between QIP and the diamond norm was given by Rosgen and Watrous IIRW05II . 
They defined the promise problem QCDa,() (quantum circuit distinguishability) whose input is two ad- 
missible super-operators Ti and T2, the "yes" instances are pairs (Ti, T2) for which ||Ti — T2\\^ > a 
and the "no" instances are the pairs for which ||Ti — T2||^ < h. Rosgen and Watrous IIRWOSI proved 
that for every a <h the problem QCD^ 5 is QlP-complete (see also BRosOSI ). 

The work of Kitaev and Watrous, as well as the work of Rosgen and Watrous do not imply that 
approximating the diamond norm itself can be done in P. In this note we prove that the diamond norm 
can be computed by solving a convex optimization problem, and therefore it is in P. More precisely, 
if we are given as input a description of T : L(V) L{y), e.g., written as a matrix of dimensions 
JV^ X N'^ (where N = dim(V)), and we are given e > 0, then we can approximate ||T||^ to within e 
additive accuracy in time poly(A^, log e~^). Independently of us, Watrous liWat09J recently showed a 
similar result using a semi-definite program. 

This claim can also be used to simplify the (somewhat more complicated) proof given in IIKWOOII 
that QIP C EXP. To see this, notice that Kitaev and Watrous already proved that the value of a 
three round quantum interactive proof system can be captured as the diamond norm of a natural super- 
operator T. Thus, given such a proof system, all we need to do is to explicitly write down the descrip- 
tion of T (which can be done in PSPACE and therefore in time exponential in poly(n), where n is 
the input length of the QIP protocol) and then approximate its diamond norm, in time polynomial in 
exp(poly(n)). 

Our proof is surprisingly simple. We use an equivalent formulation of the diamond norm, proved by 
Kitaev, and we notice that it gives a convex program using the joint concavity of the fidelity function. 
We use a representation for density matrices suggested by Liu IILiu06i in a different context for a similar 
purpose. 

2 Preliminaries 

Let V, W be two Hilbert spaces. Hom(V, W) denotes the set of all linear transformations from V to W 
and is a vector space of dimension dim(V) • dim(>V) equipped with the Hilbert-Schmidt inner product 
(Ti, r2) = Tr(r/r2). L{V) denotes Hom(V, V). Let {\i)} denote the standard basis for V. The set 

{10 01 : 1 <i,J <dim(V)} 

is an orthonormal basis of L{V). When dim(V) = 2", tensor products of Pauli operators form another 
natural basis for L(V). The Pauli operators are 

= ( J ? ) = ( ? I) = ( z 7 ) = ( J -1 ) • 

The set {cxi^® • • • ®Ci„ : < ii, . . . , i„ < 3} is an orthogonal basis of L(V), and all basis elements 
have eigenvalues ±1. 

For a linear operator A G Hom(V, W), the spectral norm of A is 

ll^ll '= sup A^ Ax 

x:\\x\\ = l 
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and is equal to the largest singular value of A. For any Pauli operator P, \\P\\ = 1. The £2 norm of A 
is 11^112 = Tv{A^A) and is equal to the £2 norm of the singular values of A. 

A pure state is a unit vector in some Hilbert space. A general quantum system is in a mixed 
state-a. probability distribution over pure states. Let {pi, denote the mixed state in which the 
pure state occurs with probability pi. The behavior of the mixed-state {pi, {(pi)} is completely 
characterized by its density matrix p = X^^Pi |0i)(<^i|, in the sense that two mixed states with the 
same density matrix behave the same under any physical operation. Notice that a density matrix over a 
Hilbert space V belongs to L{V). Density matrices are positive semi-definite operators and have trace 
1. We denote the set of density matrices over V by DiV). 

Trace norm and fidelity. The trace norm of a matrix A is defined by 



^llt, = Tr(l^l) =Tr(VAU 



Itr 

which is the sum of the magnitudes of the singular values of A. One way to measure the distance 
between two density matrices pi and p2 is by their trace distance \\pi — P2|ltr- Another useful alterna- 
tive to the trace metric as a measure of closeness of density matrices is the fidelity. For two positive 
semi-definite operators pi, p2 on the same finite dimensional space V (not necessarily having trace 1) 
we define 



T¥( a/pi 1/2 1/2 



n 2 
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We remark that some authors define y F = \\s/piy/P2\\^^ as the fidelity. Our definition is consistent 
with IIKSV02II . \Af is jointly concave, i.e., for every set {{pi,ii)}\^i of pairs of density matrices and 
every < Ai, . . . , < 1 such that Yl\=i ^« = 



1=1 i=l i=l 



A proof of this fact appears, e.g., in IINCOOi Exercise 9. 19]Q We remark that F is not jointly concave 
(see LMPHiQS. Section 2] for a short survey on what is known about the fidelity function). 

The diamond norm. Kitaev gave a different equivalent characterization of the diamond norm as 
follows. Any T : L{V) L{V) can be written in a Stinespring representation, i.e., as 

T{X) = Tr^(BXCt), 

where B,C e Hom(V, V®^) and dim(^) < {dim{V) f (see, e.g., IIKSV02i page 110] or IIWat041 
Lecture 4]). Define two completely positive super-operators Ti, T2 : L{V) L{A): 

Ti{X) = TtviBXB^), (1) 
T2{X) = TrviCXC^). (2) 

Then, the diamond norm of T can be written as 

||r||, = max{^/F(ri(p),r2(e)) : p,CeD{V)]. 

The proof of this characterization can be found in ||KSV02[ Problem 11.10] or in Watrous' lecture 
notes IIWat041 Lecture 22, Theorem 22.2] (and notice that Watrous defines the fidelity function to be 



'Note that in INCOO l the fideUty function is defined to be \/F. In particular, the joint concavity of the fidelity function 
proved in INCOOl Exercise 9.19] proves joint concavity of ^/F according to our notation. 
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VF). Further information on the trace norm and the diamond norm of super-operators can be found 
in IIKSV02II . 



Convex programming. Maximizing a convex function over a convex domain is, in general, NP-hard 
(see IIFV95I for a survey). In sharp contrast to this, convex programming, which is the problem of 
minimizing a convex function over a convex domain, is in P. One of the reasons that convex program- 
ming is easier to solve is due to the fact that in a convex program any local optimum equals the global 
optimum. Special cases of convex programming are semi-definite programming and linear program- 
ming. Convex programming can be solved in polynomial time using the ellipsoid algorithm iKha79ll 
or interior-point methods. Often, these algorithms assume a separation oracle, i.e., an efficient pro- 
cedure that given a point tells whether it belongs to the convex set, and if not, gives a half-space that 
separates the point from the convex set. However, the problem can also be solved using a membership 
oracle IIYN761lGLS88l (a randomized algorithm is given in IIBV04I ). 

For a G and i? > we define B„(a, R) = {x &W : \\x - a\\^ < R}. For a set C we 
define 

K_, = {x G : Bn{x,e) C K] 

iC+e = {x G M" : 3y G such that x G -Bn(y, e)} 

That is, ivr_e is the set of points e-deep in K and M" \ iC+e is the set of points e-deep in the complement 
oiK. 

Definition 2.1. A function Ok '■ IR" x I^"*" {0, 1} is a membership oracle for K C R" if for every 
e > 0, Ok{x, e) = 1/or any x G i^-e and Ok{x, e) = 0/or any x i^+e. Ok is efficient, if it runs 
in time polynomial in its input length. 

Definition 2.2. A function Of : K x M+ —>■ M is an evaluation oracle computing / over K, if for every 
X £ K and every e > 0, \f{x) — Of{x, e)| < e. Of is efficient, if it runs in time polynomial in its input 
length. 

Tiieorem 2.1 ( IIYN76IIJGLS881 Theorem 4.3.13]). There exists an algorithm that solves the following 
problem: 

Input : 1. A convex body K given by an efficient membership oracle. 

2. An integer n, rational numbers R,r > and a vector oq G M" such that 

5n(ao,r)CKCS„(0,i?)CM". 

3. A rational number e > 0. 

4. A convex function g : M given by an efficient evaluation oracle. 
Output .• A value x G K^^ such that \g{x) — opt| < e, where opt = miUxi^K^^ 9{x). 

The algorithm runs in time poly(n, log ,log{R/r)). 

Remark 2.1. The theorem is a slight variation of the one appearing in l[GLS88\l . There g is required 
to be defined and convex over the whole ofW^, whereas we only require that it is defined over K^^. 

To see why our variation is correct, notice that the proof given in l[GLS88\l works by a Turing 
reduction that queries membership in the convex set {{x,h) | a; G g{x) < b}. Ifx is e-farfrom K it 
is also e-farfrom {{x,b) | x G K, g{x) < b} and we can safely reject. Hence, we only need to query g 
on inputs that are in K^^. 
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3 Approximating the diamond norm in P 

3.1 Representing density matrices 

We follow IILiu06ll in the way we represent density matrices as vectors. This is due to that fact that 
we need the set of vectors representing the density matrices to contain and to be contained in balls of 
appropriate radii around the origin. 

We represent p G D{V) by its Pauli -basis coefficients, but excluding the identity coefficient which 
is always 1. Thus, we represent p G D{V) as a vector v{p) G where the ith coordinate of this 

vector is given by Vi{p) = Tr(Pj_|_i/9), where is the ith Pauli operator and Pi = /. (Notice that 
Ti{Pp) G M for Hermitian P and positive semi-definite p.) We let 

= {v{p) : p G D{V)}. 

The converse transformation ^> : K^^^ DiV) is defined by 



Notice that for any p G D(y), (^{v{p)) = p and similarly, for any x G K'^^\ v{^{x)) = x. Also for 
every x G ~^ (not necessarily in K^^^) we have that Tr($(x)) = 1, and for every x,y £ 
— <I'(y)||2 = \\x — where the first norm is over L{V) and the second over 

The convex set that we optimize over is K = K^^^ x K^^\ We claim: 
Claim 3.1. K is convex and B2iy2_2{0, ■^^) Q K CI P2Ar2_2(0, 2N). 

Proof. K^^^ is convex since the set of density matrices is convex. Hence K is also convex. Next we 
show PAf2-i(0, C which implies P2Ar2-2(0, ^) ^ K. Indeed, let x G M^''~i be such 

that ||x||n < —k^ and let 

" — 2\/]V 



1 / ^ 



XiPi 



i=2 



Clearly p is Hermitian and has trace 1. We are left to verify that p is positive semi-definite. Fix a unit 
vector u G M^. Then, 



U'PU = — I U^IU + ^ XiuTi+lU 1 > ^ ( 1 - I Xiu'Pi+lU 



i=l 



\ 1 

Y \Xi\-\\Pi+i\\\ > ViV||x||2) >0 



In order to show K C P2Af2-2(0, 2iV) it is enough to show K^'^^ C P^2_i(0, iV). Let x G i^^^l 
Then p = <^{x) G P'(V) and for any 1 < i < iV^ _ 

v^{p) = \Tr{pP+i)\ < Tr(|pP+i|) < ||P+i||Tr(/>) < 1, 

and so ||2;||2 = ||w(/o)||2 < D 
Claim 3.2. There exists an efficient membership oracle for K. 
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Proof. Clearly it is enough to give an efficient membership oracle for K^^^ . Given an input x G M^^~^ 
and an e > we construct the Hermitian matrix p = <^{x) and approximate its eigenvalues with 
accuracy C, = ^^^3/2 i^i the norm. We then look at its smallest eigenvalue and we return 1 if it is 
positive and otherwise. 

Given x, let Aj \vi){vi\ with Ai > . . . > Aa? be the spectral decomposition of p = <I>(x). The 
correctness of the membership oracle follows from the following two claims: 

• If X G k5 then \n > > C- 



If X K^^} then \n < < -C 

'(1) 



For the first item, assume x £ K_l but \n < JovW' ^^^"^^ cj = (1 + q)p — a \vn){vn\ 
a = i^Xj^ ■ Then v{a) K^^^ because \vn) is an eigenvector of a with negative eigenvalue, but 

- v{a)\\:2 = ^ \\P - < ^ \\P - ^Wtr < 2ViVa < IQ^NXn < e, 



for 



and so X ^ K^^l . A contradiction. 

For the second item, assume x K^^l and > Aat > —j^^3j2- Define a = J2i Xi>o 
for A = - Ei:A,<o ^i- Clearly, v{a) G K^^l Also, 

lire - v{a)\\2 = Vn \\p - a\\:^ < Vn \\p - a\l^ = 2\/NA < 2VnN\Xn\ < e. 

Thus, x G K^}. A contradiction. □ 

3.2 The target function 

Let V be a Hilbert space of dimension N. Let T : L{V) —>■ L{V) be a linear operator given in a 
Stinespring representation, i.e., as a pair of operators {B, C) such that 

T{X) = Tt_a{BXC^), 

and let e > 0. We assume that is a power of 2. From B and C we can compute Ti and T2 as in 
Equations ([T) and We define a target function g : K ^ [—1, 0] by 



g{x,y) = -^F{T^{^{x)),T2{<^{y))), 

Claim 3.3. g is convex over K. 

Proof. For every < Ai, . . . , Afc < 1 such that X]j=i ^3 — 

g{Y^ Xj{xj,yj)) = giY, ^j^j^Yl ^J^^j) = -^(TiiHYl A.^:,)), r2($( A,y,))) 
j=i j=i j=i j=i j=i 

k k 

= -VF(ri(5]A,p,),T2(5]A,e,)), 

where pj = ^{xj) G D{V), = ^{yj) G D{V), and we used the fact that $ is hnear for convex 
sums, i.e., ^j'^^j) — S -^j^(^j)- Now, by the joint concavity of 

k k k 

g{Y,H^j,y3)) = -VF{Y^x,n{p^),Y^x,m,)) 

j=i j=i j=i 

k k 

i=i i=i 

□ 



6 



Claim 3.4. There exists an efficient evaluation oracle for g over K. 



Proof. We are given as input (xi,X2) G K and e > 0. We compute Mi = Ti(<I>(xi)) and M2 = 
r2($(x2)) and this is done with no error. We would hke to compute g{xi,X2) = ||V-^i We 
approximate ^/Mi with C,/2 accuracy in the operator norm (it will turn out that Q = 2N-{\\b\\+\\c\\+i) 
suffices), and then we change each negative eigenvalue (if there are any) to zero. We get positive semi- 
definite Si such that ^Si — ^Mj|| < Q. We output an approximation of ||S'iS'2||tj, with e/2 accuracy. 
By Claims [331 and [331 below : 



|5'i'S'2| 



'Ml JM2 



< A^C l|5i|| + 



'M2 



<iVC(||B|| + ||C||+C)<e/2 



Thus, our output is e-close to g{xi,X2) as required. Also, observe that log(C~^) is polynomial in 
the input length, since log(||i?||) and log(||C||) are polynomial in the input length. Therefore, the 
evaluation oracle is efficient. □ 

Claim 3.5. If pi, P2, Ci, ct2 G -^(V) are positive semi-definite and \\pi — (Tj|| < Cfof i G {1) 2} then 

I 11/51/3211^ - Ikl0"2|ltr I < ^CdlPlll + Ik2||)- 



Proof 



\PlP2\ 



<7l'72 



< 
< 
< 



IPIP2I 



+ I IIPlC^2||tr - lkl'72||tr 



|Pl(/?2-Cr2)||t, + ||(/)l-0-i)f72||tj, 
IPiII \\P2 - (^2\\tr + Ikall IIPI - CTllltr 



< iVC(||pi|| + |k2||). 



□ 



Claim 3.6. For any p G D{V): V^T(p) 



< \\B\\, 



< \\c\\. 



Proof. Ti is completely positive and so Ti{p) is positive semi-definite and Ti {p) = \/\\Ti 
Express p = Aj \vi){vi\ with being an orthonormal basis, Aj > and Aj = 1. Denote 

\wi) = B \vi). Then, 



\Ti{p)\\ 



Y,^{Tiv{B\vi){v,\B^) 



< J^A,||Trv(|«;i)(«;i|)|| < J^A, 



where we have used ||Trv(|w)(w|)|| < ||ki)|l2- Thus, \\Ti{p)\\ < \\B\\^Y.i>'i = ll^f- A similar 
argument applies for T2. □ 



3.3 The algorithm 

To compute the diamond norm of a given super-operator, the algorithm essentially solves the convex 
program that finds the minimum value of g over the convex set. The last thing that we need is to show 
that g is indeed defined and can be evaluated over points that are at most e-far from this set. However 
the set K is not good enough for this purpose since matrices that lie outside this set (but still close to 
it) have negative eigenvalues and it is not clear how one should define the fidelity for such matrices. To 
overcome this problem we define a new convex set S that is just a shrinking of K. This ensures that 
matrices that are e-close to the boundary are still positive. 

We set M = — A^y||7\||pY||, where ||Tj|| is the spectral norm of Tj when viewed as a linear 
operator in Hom(L(V), -L(^)). It can be verified that minx<^K g{x) > —M. Given e > 0, we define 
a = and e' = We define 

5« = (l-a)i^«. 
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Claim 3.7. 5^^) = {x e K : Aw($(x)) > Furthermore, S^^) is convex, has an efficient mem- 
bership oracle and S^j, C K^^\ 

Proof. 

z G S'(^) <^ z = {I - a)x for some x e K^'^^ 

<|)(z) = (1 - a)<^(x) + for some G -D(V) 
^ A^(cl>(z)) > 

5^^) is convex and has an efficient membership oracle because K^^^ does. Also, S^^j, C K^^^ 
because if z G 5*^^^ and — < e' then 

\N{m) > Xn{<P{x)) - mx) - Hz)\\ = -- > _ _ 0. 



□ 

We are now ready to prove: 

Theorem 3.1. Let V be a Hilbert space of dimension N. Let T : L(y) — > ^(V) be a linear operator 
given in a Stinespring representation, i.e., as a pair of operators {B, C) such that 

T{X) = Tr^(i?XCt), 

and let e > 0. Then there exists a polynomial time algorithm (in the input length ofT and log e~^) that 
outputs a value c such that \ c— ||r||^| < e. 

Remark 3.1. The fact that the input operator T is given in a Stinespring representation is without loss 
of generality as there exists efficient algorithms to move from such a representation to other standard 
forms of representing a super-operator (see, e.g., HWat04\ Lecture 5]). 

Proof. We approximate ||Tj|| from above in time polynomial in the representation of Tj, and set M, a, 
and e' as above. We define S = S^-^^ x S^^^ and g : K ^ M as above. The target function g has an 
efficient membership oracle and is convex over K and therefore over S+^z . By Theorem 12.11 we can 
find a value opt that approximates m.inx^s_^, g{x) to within e'. 

Now, let = (01,02) G if be a point minimizing g over K, that is, g{o) = min^g/^ (7(x). We 
claim that o' = (1 — 2q)o lies in S-e'. Indeed, fix any yi G i?jv2-i(o^, e'). Then, 

XNi^Vi)) > A^($(o:)) - > ' 



and therefore y £ S. Thus, 

g{o) < opt < g{o) + e'. 

However, 

g{o') = g((l-2a)o) = -^/F(^ri (^(l-2a)$(oi) + 2a^^ ,r2 (^(l-2a)$(o2) + 2a^^^ 

< (l-2a) (-VF(ri(cI>(oi)),r2(cI>(o2)))) +2a {-Vf {t, 

< (l-2a)5(ol,02)-2-^^/F(TrvS5^TrvCCt) <(1- 20)5(0). 

Altogether, \opt - g{o)\ <e' -2a g{o) < e' + 2aM < e. □ 
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